Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/XJ7BlYOA-3-Jb7_evY-z3j6wR_k.roa
File: XJ7BlYOA-3-Jb7_evY-z3j6wR_k.roa (raw, json)
Hash identifier: 1q1wGqz8NzM2pgmYzTVIrbjzNMHW+1XRL6jGqi190Ng=
Subject key identifier: 5C:9E:C1:95:83:80:FB:7F:89:6F:BF:DE:BD:8F:B3:DE:3E:B0:47:F9
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 018FC3D673DC84ADB963265B5FD4B75212EC
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/XJ7BlYOA-3-Jb7_evY-z3j6wR_k.roa
Signing time: Wed 29 May 2024 10:12:42 +0000
ROA not before: Wed 29 May 2024 10:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9085
IP address blocks: 185.83.232.0/24 maxlen: 24
2a03:6e60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:d6:73:dc:84:ad:b9:63:26:5b:5f:d4:b7:52:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: May 29 10:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c9ec1958380fb7f896fbfdebd8fb3de3eb047f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:84:99:17:cf:ef:ec:e8:6d:11:1e:d8:9b:
41:1e:6a:25:8c:07:eb:b1:46:cd:d7:56:42:78:7c:
22:ea:f5:b7:89:9d:07:17:81:0a:29:7d:11:32:0b:
98:d7:c8:b8:be:c7:c9:ee:36:96:46:57:e4:bd:cb:
5c:41:67:af:82:11:55:77:cc:96:d9:04:64:4e:6f:
e0:85:ee:b4:6c:64:19:e2:73:c0:bb:1a:c7:02:bb:
60:a1:e6:13:2c:b5:79:55:8b:2e:94:09:3c:90:95:
a1:e1:46:65:0b:53:2b:a7:6f:6d:33:fa:7c:77:1d:
a0:33:af:14:3f:5c:ac:5b:fb:36:8a:19:b5:88:57:
6e:8a:3d:f5:32:dc:d1:9e:d5:73:90:ff:b5:31:97:
4e:1b:d4:c0:ad:0d:ae:a7:d5:e8:86:f2:9f:63:97:
13:5d:7c:95:3e:b2:d0:79:12:78:1f:43:cc:3b:ec:
29:94:e8:44:42:4c:92:07:08:63:65:da:d7:6a:cc:
9f:58:7a:e0:35:c1:9e:27:e8:77:88:dc:8b:74:b0:
b3:5f:d8:3f:1a:66:bb:95:4b:a8:a5:32:4c:27:f2:
05:57:b8:6d:66:d2:bc:64:8c:af:a5:5e:05:f6:1f:
4c:d4:89:b3:82:42:c4:49:71:46:f5:9c:c0:a1:db:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:C1:95:83:80:FB:7F:89:6F:BF:DE:BD:8F:B3:DE:3E:B0:47:F9
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/XJ7BlYOA-3-Jb7_evY-z3j6wR_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.232.0/24
IPv6:
2a03:6e60::/48
Signature Algorithm: sha256WithRSAEncryption
34:a2:c5:12:ce:34:ce:9d:4c:e9:7f:7b:15:c0:54:8c:55:dc:
0c:ca:42:6f:ef:62:c7:21:a5:66:ab:1f:34:4d:c6:22:75:cd:
a1:1f:4b:83:d4:31:69:b5:ca:c9:6f:1a:72:6a:44:f3:cc:86:
f7:29:9e:15:72:e9:4e:c4:38:24:dd:c9:bf:8e:3c:c3:62:1e:
0f:9b:85:3b:11:36:f4:bc:bf:b9:57:fb:28:3a:ae:ef:1d:6a:
b4:02:86:54:c8:6f:4f:03:d8:35:7a:df:af:8e:59:1a:c1:f3:
23:d1:5d:56:97:df:7b:a4:da:8f:1f:e2:1d:49:63:bb:38:76:
dd:02:1e:36:f8:3e:8e:fe:87:99:0e:f8:a5:56:b9:e8:45:86:
3c:ef:aa:e2:d7:98:19:e2:03:d1:56:11:0a:01:30:d2:ec:3e:
1c:f0:bf:c6:b3:0c:52:24:10:d0:81:3a:3b:58:c9:97:5e:f8:
67:93:63:1c:fc:cc:0c:19:84:d3:11:a1:3b:8f:ef:6b:5c:7e:
22:ef:66:9f:00:10:89:df:31:a6:f6:f4:66:75:60:27:2a:2b:
d6:c7:94:87:d2:92:54:3b:58:d5:c8:a4:d5:0f:1b:6f:b2:7b:
af:13:b8:cd:9d:17:99:6b:1b:c3:04:3d:2e:23:9a:79:a0:1d:
b8:12:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:30 2024 by rpki-client on console-ams.rpki-client.org